

la) CD 

PRIORITY 
DOCUMENT 

SUBMirrED OR TRANSNWTTED D^l 
COMPLIANCE WITH RULE 17.Ua) OR (b) 



PCT/AUOO/01186 



REC'D 0 7 NUV 200D 




Patent Office 
Canberra 



I, LISA TREVERROW, TEAM LEADER EXAMINATION SUPPORT AND 
SALES hereby certify that annexed is a true copy of the Provisional specification 
in connection with Application No. PQ 3123 for a patent by AUSTRLIAN 
ARROW PTY LTD filed on 28 September 1999. 



WITNESS my hand this 
Thirty-first day of October 2000 




LISA TREVERROW 

TEAM LEADER EXAMINATION 

SUPPORT AND SALES 



• m 

- 1 - 



P/OO/009 
Regulation 3.2 

AUSTRALIA 

PatmtisJteUJ990 



PROVISIONAL SPECIFICATION 

FOR^7H&INVEN>TiON*<ENTITLED: 
"IMP.R®^D:SE<lOTff«FV^ SYSTEM^ 

Applicant: 

AUSTRALIAN ARROW PTY LTD 



The invention is described in the following statement: 




This invention relates to an improved security system and relates particularly 
to a security system which permits authorise keyless entry through or past a closure, 
such as a door, into a building, secure area, motor vehicle or the like. 

The invention will be described with particular reference to its application to 
5 a motor vehicle, but it will be understood that the principles of the invention apply 
to a wide range of applications. 

Many forms of security systems have been proposed for motor vehicles 
which enable an authorised person to obtain access to the vehicle without the use of 
a key to physically unlock the vehicle doors. Such known systems include the 
10 provision of radio transmitter devices which, on actuation, cause the vehicle to 
unlock. Other systems, commonly known as "passive access" systems, enable an 
authorised person carrying an electronic identification device to approach the 
locked vehicle whereupon, on touching the door handle or triggering a short range 
proximity sensor in the vehicle, the vehicle transmits a message to the electronic 
15 identification device. Typically, the message contains vehicle identification 
information so that the electronic identification device can determine whether or not 
to respond. The vehicle transmission may also contain a random number. If the 
vehicle identification code is correct, the random number is manipulated by the 
electronic identification device according to an algorithm. The result of the 
20 manipulation is then transmitted to the vehicle which compares the response to an 
expected response. If the transmitted response and expected response match, the 
vehicle is unlocked. 

The system may also include vehicle operation authentication whereby a 
similar process is repeated when the vehicle operator attempts to start the vehicle. 
25 In this instance, it is desirable for the system to be able to determine whether 

or not the identification device is inside the vehicle. Therefore, typically, the 
vehicle's signal transmission is controlled so that it is unlikely that the identification 
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device could detect the signal from outside the vehicle. 

While the passive access system described provides a remote keyless entry 
system which allows authorised operation^and entry to a vehicle by an authorised 
person, carrying the electronic identification device, simply walking up to the 
vehicle, opening the door and driving off, the system is vulnerable to an 
unauthorised person obtaining access to the vehicle. An attack on the security takes 
advantage of the contactless operation of the electronic identification device and the 
ability to activate that device remotely without the knowledge of the authorised 
owner. The attack works as follows: 

The authorised owner of the vehicle locks the vehicle and walks away, 
beyond the normal range of communication between the electronic 
identification device and the vehicle communication system. A person 
carrying a transceiver follows the operator. Another person carrying a 
second transceiver stays with the vehicle. The person near the vehicle 
triggers the vehicle to transmit its identification message, such as by 
touching the door handle or triggering a proximity sensor in the-vehicle. 
The transceiver carried by that person relays the vehicle's transmission 
to the transceiver of the second person near the authorised operator. 
The electronic identification device carried by the authorised operator 
receives the relayed vehicle transmission and responds. This response 
is received by the transceiver carried by the person near the owner and 
the response is relayed back to the transceiver carried by the person 
near the vehicle which transmits the identification device response and 
the vehicle, receiving a valid response^ unlocks the vehicle. 
While proposals have been made to resolve the potential security problem, 
such proposals are relatively expensive and difficult to implement. One such 
proposal requires a further parameter to be determined, such as the distance between 
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the vehicle and the electronic identification device, and the system is arranged so 
that the vehicle will only unlock if that distance is no greater than a predetermined 
maximum. While this additional proximity criteria is effective in most 
circumstances, it is a technically difficult and relatively expensive solution. 
5 It is therefore desirable to provide an improved passive access security 

system which obviates the difficulties of the known system. 

It is also desirable to provide an improved passive access security system 
which is relatively simple and economic to implement. 

It is also desirable to provide an improved passive access security system 

10 which is robust and immune to attack using easily available, portable equipment 
such as transceivers. 

In accordance with one aspect of the invention there is provided a security 
system having transponder means adapted to be actuated to generate and transmit an 
electromagnetic trigger signal and a portable electronic device adapted to receive 

15 and respond to said trigger signal by transmitting a response signal, the receipt and 
authentication of which by tiie transponder means gives rise to a predetermined 
event, said response signal comprising one or more radio frequency signals of a 
frequency and duration determined by an algorithm together with a unique stored 
number with reference to a random number contained in the trigger signal. 

20 In one embodiment of the security system of the invention incorporated into 

a motor vehicle, the transponder means is adapted to be actuated either by a 
proximity sensor or by a person touching the vehicle, lifting a door handle or 
otherwise signalling the transponder means. When an authenticated response signal 
is received by the transponder means, it causes the vehicle door or doors to become 

25 unlocked, in a known manner. 

The present invention seeks to avoid unauthorised defeat by varying the 
communications between the transponder means and the portable electronic device. 
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With present passive access systems as described above, the communication 
transmissions are of fixed frequencies and in relatively narrow bandwidths. With 
the present invention, the communication signals can be throughout a relatively 
broad spectrum of frequencies, such as from ^200 MHz to 400 MHz, or even 
broader. With such a possible bandwidth, it is virtually impossible for a person 
with a transceiver or similar device to monitor, detect and retransmit the response 
signal. A person attempting to defeat the system would need to relay the entire 200 
MHz band to an accomplice, but the wide bandwidth coupled with the low level of 
the target signal make implementation extremely unlikely. 

In one form of the invention, the use of an algorithm with a unique stored 
number to manipulate the random number contained in the trigger signal means that 
both the fi^equency of the response sign|il«rande'the number and length of transmitted 
pulse trains:^ean be varied^ The^transponder^^means is able^to ^une^itts receiver to the 
firequencies of the expe0ted«cesp.onse^sigiial««^ 

In order^^hat the invention is more^Eeadily undeistood^-onenembodiment will 
now be described with reference to the accompanying drawing /which consists of a 
block diagram schematically illustrating the features of the invention. 

Referring to the drawing, a proximity sensor 12 located in a vehicle 14 
senses in a known manner the presence of a person adjacent the vehicle 14. The 
proximity sensor may sense by a person touching or lifting a door handle, which 
may activate a switch, or by using a short range proximity sensor located in the 
vehicle and using, for example, capacitive monitoring. When the proximity sensor 
is activated, it causes the transponder 1 6 to transmit a radio frequency trigger signal 
at a fixed carrier frequency. This signal includes^^a randomimumber generated by 
random number>,generat0r47 associated with the transponder 16. The trigger signal 
also incorporates coded vehicle identification information. 

If the sensed person is carrying an electronic identification device 18, the 
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device receives the trigger signal in a receiver and decoder 19 and determines if the 
transmitted coded vehicle identification information matches stored information in 
the device. If the received and stored information matches, the random number 
included with the trigger signal is manipulated in processor 21 using an algorithm 
5 22 and a unique stored identification number 23. The resulting signal comprises 
one or more bursts of RF energy at one or more frequencies, the variables being 
determined by the algorithm working with the unique stored number in conjunction 
with the random number transmitted from the vehicle 14. The response signal is 
transmitted by the transmitter 24 and received by a receiver 26 in the vehicle 

10 associated with the transponder. The receiver has been tuned to the frequencies of 
the expected response signal in accordance with the transmitted random number. A 
comparator 27 compares the response signal with the expected signal, it being 
understood that the transponder stores the unique identification number of the 
device and is able to use the same algorithm to calculate the expected response. If 

15 the received response signal matches the expected response a signal is sent to a door 
lock actuator 28 to unlock the vehicle door(s). 

If vehicle operation authentication is also required of the system, the 
information exchange described above is repeated when the operator attempts to 
start the vehicle. In this instance, it is desirable for the system to determine if the 

20 identification device 18 is inside the vehicle 14. Accordingly, the signal trMsmitted 
by the transponder for this function is controlled so that it is unlikely that the 
identification device 18 could detect the signal from outside the vehicle. This 
ensures that the vehicle cannot be operated unless the identification device is within 
the vehicle. 

25 It will be appreciated that the security system of the invention is much more 

secure than previous systems of a similar type by reason of the use of a wide 
bandwidth for transmitting and receiving signals. Further, by using an algorithm 
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together with an unique identification number to manipulate the random number 
and generate a response signal having at least three variables, vis, the number of 
pulses, the duration of the pulses and the RF frequencies of the individual pulses, it 
will be virtually impossible to attack the system by the use^of normal, portable 
transceivers. Of course, the response signal can also include other variables such as 
an identification number or the like. 

A system of the invention may be made substantially more immune to 
interfering external RF sources. However, some redundancy should be made in the 
identification device's response coding to allow for the masking which may occur 
due to interfering external signals at spot frequencies. 

It will be appreciated that the principals of this invention may be used in a large 
number of different applications, such as security access associated with buildings, 
including extemal doors; internal doors, lifts, maintenance areas^and the-like. The 
principals may also be used to provide authorisation for activities other than access. 
Thus, the system may be designed^to permit only authorised use of equipment 

Many modifications may be made to the design and/or construction of a 
security system in accordance with the present invention and all such modifications 
which come within the scope of the invention shall be deemed to be within the 
ambit of the description. 
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